Terms of Service & Privacy Notice

1. Zero Payload Logging & Stateless In-Memory Processing

Tinplate APIs inspect and process request payloads strictly in volatile V8 isolate memory on Cloudflare Workers for the duration of the HTTP request and immediately discard them. We never log, store, sell, or retain your request bodies, response bodies, signing secrets, PII, HTML, emails, or tokens.

2. 100% Tracking-Free, Ad-Free & Diagnostics-Off

Cloudflare Workers Observability, Invocation Logs, and Analytics Engine bindings are explicitly disabled (observability.enabled = false, head_sampling_rate = 0, invocation_logs = false) across both the Gateway and Fetcher Workers:

• No Request Analytics or Tracking: We do not run Analytics Engine, third-party trackers, ad pixels, or cookies.
• No Invocation or Console Logs: Worker invocation logging and tail diagnostics are turned off in configuration.
• No Payload Persistence: Request and response bodies exist only in V8 isolate memory for the duration of the HTTP call.

3. Marketplace Proxy Infrastructure vs. Direct Bearer-Key Access

Security-minded buyers should account for how requests reach Tinplate's Cloudflare Workers:

• Requests via RapidAPI or Zyla API Hub: When you call Tinplate through RapidAPI (*.rapidapi.com) or Zyla API Hub, your HTTP request traverses that marketplace's API proxy infrastructure before reaching Tinplate's Cloudflare Worker. While Tinplate never logs or stores payloads, the marketplace proxy processes your request under RapidAPI's Privacy Policy or Zyla's Privacy Policy.
• Direct Bearer-Key Access (Zero Third-Party Proxy): Customers with strict data-governance, HIPAA/GDPR, or zero-intermediary requirements can use a Direct Bearer Key (Authorization: Bearer <API_KEY>) directly against https://api.tinplate.dev. Direct requests terminate straight at Tinplate's Cloudflare edge isolate with zero marketplace proxies in the path.

4. Short-Lived Public Caching & Optional Workers AI

• Public Cache Only: Public EU VIES VAT lookup results (/v1/eu-vat-iban/vat) and public HTML-to-Markdown conversions by URL hash (/v1/html-to-markdown) may be cached briefly in Cloudflare KV to reduce upstream latency. Raw HTML inputs and private secrets are never cached.
• Optional AI Judge (Disabled by Default): By default ("use_ai_judge": false), /v1/prompt-guard and /v1/hallucination-diff run 100% deterministically inside the Worker isolate with zero external calls. When you explicitly pass "use_ai_judge": true, the text excerpt is passed over an internal Cloudflare binding to Cloudflare Workers AI (@cf/meta/llama-3.1-8b-instruct) for stateless inference; neither Tinplate nor Cloudflare trains models on or retains Workers AI inputs/outputs.
• Billing Data: All subscriptions, invoices, and payment details are handled directly by RapidAPI, Zyla API Hub, or our payment processor.

1. Service Scope & Marketplace Billing

Tinplate provides deterministic and edge-hosted micro-APIs via https://api.tinplate.dev, distributed through RapidAPI, Zyla API Hub, and Direct Bearer-Key subscriptions. Plan quotas, rate limits, overages, and refunds are governed by your subscribed plan.

2. Fair-Use Clause for Fetcher-Backed APIs

Certain endpoints (/v1/html-to-markdown, /v1/security-headers, /v1/url-normalizer, and /v1/ssrf-firewall with redirect inspection) fetch public URLs on your behalf via an isolated SSRF-guarded Worker (edgeguard-fetcher). By using these endpoints, you agree not to:

• Target private, loopback, RFC1918, CGNAT, or cloud metadata networks, or attempt to bypass SSRF protections.
• Use Tinplate as an open proxy, DDoS amplifier, credential-stuffing relay, or high-frequency bulk scraper.
• Fetch unlawful content or circumvent target authentication or access controls.

All outbound fetches enforce a 10-second timeout, a 1 MB response body cap, and redirect-hop limits. Abusive fetch patterns may be throttled or suspended.

3. Advisory Security & Compliance Outputs, No Warranty & Limitation of Liability

All Tinplate APIs are provided "as is" and "as available" without warranty of any kind, express or implied.

• Defense-in-Depth Advisory Nature: Security, guardrail, and compliance outputs—including prompt-injection risk scores (/v1/prompt-guard), outbound LLM guardrails (/v1/llm-output-guard), shell/SQL safety checks (/v1/command-sql-guard), SSRF pre-checks, MCP manifest lints, secret/PII redaction, JWT/JWK audits, and EN 16931 / tax ID validations—are heuristic or deterministic decision-support signals. They do not guarantee the absence of novel attacks, semantic bypasses, or tax-authority rejections, and must be paired with least-privilege sandboxing, parameterized queries, human confirmation gates, and qualified legal/tax review.
• Limitation of Liability: To the maximum extent permitted by applicable law, Tinplate shall not be liable for any indirect, incidental, consequential, special, or punitive damages, or for any loss of data, revenue, or security breach arising from reliance on API outputs. Tinplate's total cumulative liability for any claim shall not exceed the fees paid by you for the applicable API during the preceding three (3) months.